Your mailboxes
No relayAny provider with IMAP and SMTP connects with the mailbox password; the servers are found from the domain's MX record. Microsoft 365 connects with Microsoft's own sign-in.
Passwords and tokens are encrypted at rest with AES-256-GCM. SPF, DKIM and DMARC are checked daily, with the exact record to add.